Skip to content
OpenAdvisories
Medium · 5.3 CVE-2018-13288 EUVD-2018-5236GHSA-j5c7-mv59-8m5r

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remot…

Published Apr 1, 2019 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: File Station

Description

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.

Affected products

VendorProductAffectedFixed
Synology File Station unspecified – < 1.2.3-0252, unspecified – < 1.1.5-0125 1.2.3-0252

References